Privacy Policy
Effective Date: 01 September 2025 | Last Updated: 01 September 2025
Privacy Commitment
MoonCro FZ-LLC is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered startup scoring tool and related services.
1. Introduction
MoonCro FZ-LLC ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered startup scoring tool and related services (collectively, the "Platform").
MoonCro FZ-LLC is a company registered in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates, and complies with the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021). If you are located in the European Union or EEA, we also strive to align with the General Data Protection Regulation (GDPR).
2. Data We Collect
We may collect the following categories of personal and business data:
- Contact Information: Name, email, phone number
- Startup Data: Company name, description, financials, documents (e.g. pitch deck)
- Technical Data: IP address, browser type, access times
- Usage Data: Information about how you interact with the Platform
- AI Interaction Data: Inputs you provide to our AI tools and outputs generated
3. How We Use Your Data
We use your data to:
- Evaluate and generate AI-based startup scores and reports
- Operate, maintain, and improve the Platform
- Communicate with you about updates, offers, or support
- Ensure legal and regulatory compliance (e.g. AML/KYC)
4. Legal Basis for Processing
We process your data based on:
- Your consent (e.g. submitting data for scoring)
- Contractual necessity (e.g. providing access to reports)
- Legal obligations (e.g. financial regulation compliance)
- Our legitimate interests (e.g. improving the Platform)
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with:
- Our service providers (e.g. hosting, analytics, AI infrastructure providers)
- Legal or regulatory authorities when required by law
- Partners and investors only with your explicit consent
6. International Data Transfers
Your data may be transferred to and processed in countries outside of your jurisdiction, including the UAE. Where applicable, we implement appropriate safeguards (e.g. standard contractual clauses or equivalent under UAE law).
7. Data Retention
We retain your data only as long as necessary for the purposes outlined in this Policy or as required by law. You may request deletion at any time, subject to legal or compliance obligations.
8. Your Rights
Under applicable data protection laws, you have the following rights:
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data
- Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary, or if you withdraw consent (where applicable)
- Right to Restrict Processing: You may request restriction of processing in certain circumstances, such as if you contest the accuracy of your data or object to processing
- Right to Object: You may object to our processing of your personal data for direct marketing or based on our legitimate interests
- Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format
- Right to Withdraw Consent: If processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal
- Right to Lodge a Complaint: You may file a complaint with your local data protection authority if you believe your data protection rights have been violated
To exercise any of these rights, please contact us at: info@mooncro.com
9. Security
We implement technical and organizational measures to secure your data, including encryption, access control, and regular audits. However, no system is 100% secure, and we cannot guarantee absolute protection.
9.1 Security Measures
- End-to-end encryption for data transmission
- Advanced encryption for data storage
- Secure access controls and authentication
- Regular security audits and assessments
- Compliance with industry security standards
10. Cookies and Analytics
We may use cookies or similar technologies to enhance Platform functionality and analyze usage. You can manage cookie preferences through your browser settings. See our separate Cookie Policy for more details.
11. Children's Privacy
The Platform is not intended for individuals under 18 years old. We do not knowingly collect data from minors.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of significant changes by email or notice on the Platform.
When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you through email or platform notifications for material changes
- Provide reasonable notice before changes take effect
13. AI Sub-Processors and Use of OpenAI
AI Processing Disclosure
We use OpenAI's large language models in the backend to power our AI-based scoring system. OpenAI acts as a data processor under our instructions. The data submitted to our Platform is transmitted securely and is not used by OpenAI to train or improve its models. No personally identifiable information or sensitive data is intentionally shared with OpenAI.
By using MoonCro, you acknowledge and agree that your startup data may be processed using OpenAI infrastructure under appropriate safeguards, solely to deliver the requested scoring and evaluation services.
14. Data Controller and GDPR Representative
MoonCro FZ-LLC is the data controller responsible for the collection and processing of your data. The designated internal data representative is Andrijana Kevic, Founder & Data Representative.
Although we are not established in the European Union, we voluntarily aim to align with the principles of the General Data Protection Regulation (GDPR) where applicable. Given the limited scale and scope of data processed, we have not appointed an EU representative under Article 27 of the GDPR at this time.
15. Regulatory Compliance
We comply with applicable data protection laws in all jurisdictions where we operate:
- UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021)
- GDPR (for EU/EEA residents)
- CCPA (for California residents)
- Other applicable local privacy laws
16. Contact Information
For any privacy-related questions or requests, please contact us:
Email: info@mooncro.com
Privacy Inquiries: privacy@mooncro.com
Data Access/Deletion Requests: info@mooncro.com
Address: MoonCro FZ-LLC
Compass Building, Al Shohada Road,
AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Data Representative: Andrijana Kevic, Founder & Data Representative
This Privacy Policy represents our commitment to protecting your privacy and maintaining the trust you place in us when using our AI-powered startup scoring platform.